Lucene search

K
cve[email protected]CVE-2007-3654
HistorySep 17, 2007 - 5:17 p.m.

CVE-2007-3654

2007-09-1717:17:00
CWE-20
web.nvd.nist.gov
20
netbsd
display driver
allocattr
denial of service
vulnerability
cve-2007-3654
nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

The display driver allocattr functions in NetBSD 3.0 through 4.0_BETA2, and NetBSD-current before 20070728, allow local users to cause a denial of service (panic) via a (1) negative or (2) large value in an ioctl call, as demonstrated by the vga_allocattr function.

Affected configurations

NVD
Node
netbsdnetbsdMatch3.0
OR
netbsdnetbsdMatch3.0.1
OR
netbsdnetbsdMatch3.0.2
OR
netbsdnetbsdMatch4.0beta2

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for CVE-2007-3654